General
- Target 2026-09-13_820edf75d8cc692f2e8be9f942e7de0d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 441KB
- Sample260913-qf89kavang
- SHA256 20870428aec2b736d49bf259a7cc038925b6a6d7912619b64347bdf76900a1ce
- MD5 820edf75d8cc692f2e8be9f942e7de0d
- SHA1 7176410f8021b79ec6094397601af0b4c5e4d821
- SHA512 6c16b6f59ec22b216dbf8a8b85d0a4fb6dc66d87f00d1674ddb6e7930aaef5a1c023960c273ebe83ac3f26b6dac85b45075221232fd61a362f50c85c95bb9af0
- SSDEEP 6144:wlTNGsqrKVs4RGY+Z9Mny6++6OCHvoB2z5WTaMLOJFmrLExdW1+KeIRg:28KVs4RX+7MnV++6Prz5WTFLOJuoxCg
- TLSH T178A43A0692A901BCE0BBA3789D579D02E77A780A03B1DADF03D0D5762E577D09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_820edf75d8cc692f2e8be9f942e7de0d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_820edf75d8cc692f2e8be9f942e7de0d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_820edf75d8cc692f2e8be9f942e7de0d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 441KB
- SHA256 20870428aec2b736d49bf259a7cc038925b6a6d7912619b64347bdf76900a1ce
- MD5 820edf75d8cc692f2e8be9f942e7de0d
- SHA1 7176410f8021b79ec6094397601af0b4c5e4d821
- SHA512 6c16b6f59ec22b216dbf8a8b85d0a4fb6dc66d87f00d1674ddb6e7930aaef5a1c023960c273ebe83ac3f26b6dac85b45075221232fd61a362f50c85c95bb9af0
- SSDEEP 6144:wlTNGsqrKVs4RGY+Z9Mny6++6OCHvoB2z5WTaMLOJFmrLExdW1+KeIRg:28KVs4RX+7MnV++6Prz5WTFLOJuoxCg
- TLSH T178A43A0692A901BCE0BBA3789D579D02E77A780A03B1DADF03D0D5762E577D09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application